Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

GHSA-frxx-2m33-6wcr

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-frxx-2m33-6wcr

Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). Users passing a malformed or malicious version of a TFLite graph into TOCO will cause TOCO to crash or cause a buffer overflow, potentially allowing malicious code to be executed.

gitlab/pypi/tensorflow/CVE-2018-8825

Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). Users passing a malformed or malicious version of a TFLite graph into TOCO will cause TOCO to crash or cause a buffer overflow, potentially allowing malicious code to be executed.

gitlab/pypi/tensorflow-gpu/CVE-2018-8825

Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). Users passing a malformed or malicious version of a TFLite graph into TOCO will cause TOCO to crash or cause a buffer overflow, potentially allowing malicious code to be executed.

pypa/tensorflow-gpu/PYSEC-2019-233

Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local).

pypa/tensorflow/PYSEC-2019-208

Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local).

pysec/PYSEC-2019-208

Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local).

pysec/PYSEC-2019-233

Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local).